Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File:                     lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier:          77CytP72LGjbYM5qXtck2KCrsAdoSNv3YSNKp/Mk2ZQ=
Subject key identifier:   7D:8D:AE:C9:1F:E6:F7:BC:69:E3:5C:F3:8B:2D:13:D9:E9:2C:F4:38
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer:       /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial:       019873E299DBAD1452E8CCEA4CA66F55699F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 07:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:27 +0000
Files and hashes:         1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: 2bDg7dOoH64qPkb4tViwirgSlFHfbwffACPja+J6y0g=)
                          2: sA1HdIpnNshvOPJPgaGNIhZrUb8.roa (hash: 7Bi1HUyjDkybQXNM/TN4TmwGL8in9oSgJiNHpva8HX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:99:db:ad:14:52:e8:cc:ea:4c:a6:6f:55:69:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
        Validity
            Not Before: Aug  4 07:01:27 2025 GMT
            Not After : Aug  5 07:01:27 2025 GMT
        Subject: CN=7d8daec91fe6f7bc69e35cf38b2d13d9e92cf438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:07:fe:9c:5a:08:bc:b3:75:e4:bb:58:42:
                    71:a0:d6:a9:48:94:70:85:b4:05:0a:a4:89:34:80:
                    69:25:21:67:10:41:ff:f3:39:fc:d0:74:f7:fc:c3:
                    be:5d:86:96:9a:6a:6e:d3:27:36:73:fd:b5:79:63:
                    af:6e:38:27:df:f0:02:1d:da:cb:2f:35:da:62:21:
                    8c:b6:b1:af:36:a9:98:46:8d:da:a8:28:23:a3:40:
                    37:05:58:e6:54:44:f6:4d:c4:ba:00:58:68:62:94:
                    10:eb:31:3b:5b:61:9d:a0:44:45:9a:bd:01:17:ea:
                    7a:cf:90:50:a5:aa:b1:0f:d3:9a:ac:35:db:ec:33:
                    2f:0b:4d:f6:bc:a5:f2:fc:db:5e:75:74:e8:27:b3:
                    92:f5:3d:fc:bb:cb:b5:a1:b6:cd:96:a0:7a:6f:e5:
                    05:e4:19:3d:11:5d:55:53:17:15:19:34:c7:b7:40:
                    eb:b7:91:5d:51:18:bf:b3:2e:72:cd:c9:4c:58:b1:
                    14:a8:40:ec:6d:aa:cf:75:e6:2a:b0:3b:f3:d6:b1:
                    4c:22:26:dc:3f:17:03:d2:44:a5:75:72:83:41:f3:
                    dc:ac:28:6f:12:d6:5b:52:e6:50:18:13:69:03:93:
                    f4:7d:f7:5c:ba:6d:79:3c:ec:2d:a3:8e:9f:88:a9:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:AE:C9:1F:E6:F7:BC:69:E3:5C:F3:8B:2D:13:D9:E9:2C:F4:38
            X509v3 Authority Key Identifier:
                keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:1d:ba:56:81:16:95:9a:77:a5:c1:b1:67:68:f8:c4:11:
         1f:74:42:98:89:5d:a6:c9:4d:46:10:0c:e2:e9:0c:3c:be:56:
         d9:be:ad:67:1c:b2:6a:9e:f2:39:c1:98:20:18:3f:68:1a:5b:
         92:b5:28:ee:d7:a1:c4:c1:d3:67:3a:e4:c7:38:d1:ee:dc:65:
         aa:ad:55:94:21:34:6a:dc:1c:c0:c0:d8:0f:97:e1:7c:56:38:
         18:f1:f7:cd:3f:32:4a:dc:5a:56:09:49:d3:1c:df:69:16:73:
         25:79:48:36:fc:fe:53:98:06:a3:54:e4:f9:cf:48:81:80:8c:
         37:06:d0:a8:13:47:06:7c:e6:5d:20:d2:da:73:22:16:48:fb:
         d5:0f:90:c3:5b:5c:30:18:af:35:2c:62:ec:eb:ec:a5:d1:20:
         e0:39:1f:22:bc:04:53:71:f9:d9:03:5a:8f:29:dc:c9:d4:52:
         c6:dc:01:bc:d8:12:58:8c:90:55:16:85:e8:03:35:9b:1d:68:
         d2:2e:af:19:01:0c:78:a3:06:18:59:a2:5b:45:e5:03:bf:70:
         7c:a6:04:b0:04:4f:96:ee:92:97:9d:46:57:9b:cf:7c:79:c4:
         22:87:fb:8d:80:46:15:0c:7f:46:60:45:1a:1c:95:07:c4:bf:
         23:e7:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:15 2025 by rpki-client